– %temp%\aaa\mamatije2.exe Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. – %temp%\aaa\3kal.cmd Furthermore it gets executed after it was fully created.

Miscellaneous

Checks for an internet connection by contacting the following web site: • x.**********ners.in